Primary and Nursery School
Beaford, Winkleigh, Devon EX19 8LJ
The ‘Data Protection Act 1998’ established certain safeguards regarding the use of personal data by organisations including the schools. The Act gives rights to those (known as data subjects) about whom data is held, such as pupils, parents and teachers. This includes:
▪ the right to know the types of data being held
▪ why it is being held
▪ to whom it may be communicated
Being transparent and providing accessible information to individuals about how we use their personal data is a key element of the Data Protection Act 1998 (DPA) and the General Data Protection Regulation (GDPR). The school provides this information in a privacy notice which informs parents, pupils and staff:
▪ what data is collected about them
▪ for what purposes the data is collected
▪ how the data is used (processed)
▪ what the lawful basis is for processing
▪ how long is the data retained
▪ who the data is shared with
▪ why the data is shared
From 25 May 2018, the Data Protection Act will be replaced by the General Data Protection Regulation (GDPR).
We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to support our pupils’ learning, monitor and report on their progress, provide appropriate pastoral care; and assess the quality of our services. This information will include their contact details, national curriculum assessment results, attendance information, any exclusion information, where they go after they leave us and personal characteristics such as their ethnic group, any special educational needs they may have as well as relevant medical information. We are required, by law, to pass certain information about our pupils to our local authority (LA) and the Department for Education (DfE). DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the Data Protection Act 1998.